Skip to content
OpenAdvisories

Vendor

Bold Themes

65 known vulnerabilities.

Products

Bold Page Builder 43 Bold Timeline Lite 5 Bello - Directory & Listing 3 Avantage 1 Amwerk 1 Nifty 1 Codiqa 1 Medicare 1 Celeste 1 DentiCare 1 Travelicious 1 Addison 1 ReConstruction 1 Goldenblatt 1 Nestin 1 Ippsum 1 Avala 1
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-3267

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode

    The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_price_list shortcode in all versions up to, and including, 4.8.8 due to insufficient input sanitization and output escaping on user supplied attribu…

    Bold Themes Bold Page Builder Web / CMS
  • Medium 6.4
    CVE-2024-3266

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute

    The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of widgets in all versions up to, and including, 4.8.8 due to insufficient input sanitization and output escaping on user supplied attributes. This m…

    Bold Themes Bold Page Builder Web / CMS
  • Medium 6.5
    CVE-2024-30442

    WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.8.0.

    Bold Themes Bold Page Builder
  • Medium 6.5
    CVE-2024-30179

    WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.7.6.

    Bold Themes Bold Page Builder
  • Medium 6.4
    CVE-2024-1159

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content

    The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This make…

    Bold Themes Bold Page Builder Web / CMS
  • Medium 5.4
    CVE-2024-1160

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link

    The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    Bold Themes Bold Page Builder Web / CMS
  • Medium 5.4
    CVE-2024-1157

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL

    The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button URL in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    Bold Themes Bold Page Builder Web / CMS
  • Medium 6.5
    CVE-2023-49823

    WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.6.1.

    Bold Themes Bold Page Builder